---
id: "CVE-2026-59630"
page: "https://infrastack.ai/live/CVE-2026-59630"
kind: "vulnerability"
aliases: ["CVE-2026-59630"]
title: "Android-style policy check flaw lets attackers downgrade stored security policies locally"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["local-privilege-escalation", "other", "rust"]
not_affected_if: []
published_at: "2026-11-10T20:19:32+00:00"
first_seen_at: "2026-11-10T20:46:15+00:00"
updated_at: "2026-11-10T20:49:32+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59630", "first_seen_at": "2026-11-10T20:46:15+00:00"}]
exploit_sources: []
---

# Android-style policy check flaw lets attackers downgrade stored security policies locally

Link for people: https://infrastack.ai/live/CVE-2026-59630 (this .md is for agents)

A logic error in check_constraint_monotonicity in lib.rs lets stored security policies be downgraded and rollback protection bypassed. The description says an attacker gets local privilege escalation with no extra execution privileges and no user interaction.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T20:46:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-59630

## From the sources

In check_constraint_monotonicity of lib.rs, there is a possible way to downgrade stored security policies and bypass rollback protection due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_